Senior Cloud Identity Engineer

This is a fully remote position, open to applicants in Germany.

📋 Description

• Design and enhance Microsoft Entra ID Governance utilizing Access Reviews and governance methodologies.

• Collaborate with business stakeholders to establish governance processes.

• Create script-based automation to ensure consistent governance throughout a decentralized Microsoft Entra environment.

• Automate the lifecycle management of Service Principals, certificates, secrets, and federated credentials.

• Integrate workload identity services with Azure Key Vault.

• Develop and implement self-service functionalities for Service Principals, Entra Groups, and delegated administration.

• Assess and refine Azure RBAC, Entra RBAC, application permissions, Microsoft Graph permissions, and OAuth consent models.

• Establish identity monitoring and detection systems for expiring credentials, permission misuse, and guardrail violations.

• Utilize Microsoft Sentinel, Azure Monitor, Log Analytics, and Kusto Query Language (KQL) for identity oversight.

• Assist in the automation of Joiner, Mover, and Leaver processes using HRIS as the authoritative identity source.

⛳️ Requirements

• Practical experience in designing and automating cloud identity solutions.

• Familiarity with Microsoft Entra, Administrative Units, Microsoft Entra ID Governance, Microsoft Graph Permissions, Azure, Microsoft 365, and Power Platform.

• Experience in navigating complex cloud environments.

• Capability to design Zero Trust and Least Privilege architectures.

• Understanding of automation, APIs, governance, and secure-by-design principles.

• Knowledge of Permission Misuse Detection and identity governance.

• Interest in emerging identity technologies.

• Willingness to experiment with new ideas, share knowledge, and convey technical concepts effectively.

• Ability to work collaboratively across teams.

• Experience with Microsoft Sentinel, Azure Monitor, Log Analytics, and Kusto Query Language (KQL).

• Proficiency in PowerShell and Bash.

• Familiarity with Azure Functions or Logic Apps.

• Experience with Microsoft Graph API.

• Knowledge of Azure RBAC, Entra RBAC, Azure Policy, Azure Key Vault, Managed Identities, Enterprise Applications, App Registrations, Service Principals, Conditional Access, Identity Protection, Workload Identity Federation, OAuth 2.0, and OpenID Connect.

• Experience with AI-assisted engineering tools, Entra Agent ID, Identity Blueprints, or Microsoft 365 Agents/Copilot is a plus, but not mandatory.

🏝️ Benefits

• Comprehensive onboarding program.

• Remote working options.

• €500.00 allowance for home office setup.

• Reimbursement for travel costs and hotel expenses for anchor days.

• Access to various internal and external training opportunities.

• Employee referral bonus.